{"apiVersion":"1.0","identifier":"CVE-2026-79912","description":"A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.","publishedAt":"2026-08-25T23:17:59","lastModifiedAt":"2026-08-26T16:19:05","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79912","cvssScore":8.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","epssProbability":0.01402,"riskScore":0.93,"affectedProduct":"TOTOLINK N600R","affectedVersions":"cannotmatch","vulnerabilityType":"Firmware","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-79912","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-79912","en":"https://www.redsauce.net/en/cves/CVE-2026-79912","fr":"https://www.redsauce.net/fr/cves/CVE-2026-79912","pt":"https://www.redsauce.net/pt/cves/CVE-2026-79912","de":"https://www.redsauce.net/de/cves/CVE-2026-79912","sk":"https://www.redsauce.net/sk/cves/CVE-2026-79912","el":"https://www.redsauce.net/el/cves/CVE-2026-79912"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-79912"}}